CVE-2016-2988: IBM Tivoli Storage Manager For Virtual Environments

High severity, CVSS 8.5. EPSS: 1% chance of exploitation in the next 30 days.

IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 6.4.x before 6.4.3.4 and 7.1.x before 7.1.6 allows remote authenticated users to bypass a TSM credential requirement and obtain administrative access by leveraging multiple simultaneous logins.

Affected products

• IBM Tivoli Storage Manager For Virtual Environments: version 6.4 only; version 7.1 only

Published 2016-11-25. Last modified 2026-06-17.